CVE-2012-5562 Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite
MediumCVSS 6.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat network proxy | < 0:2.20.18-1.el5sat | 0:2.20.18-1.el5sat |
| redhat network proxy | < 0:7.1-8.el5sat | 0:7.1-8.el5sat |
| redhat network proxy | < 0:2.2.8-22.el5sat | 0:2.2.8-22.el5sat |
| redhat network proxy | < 0:2.0.1-1.el5sat | 0:2.0.1-1.el5sat |
| redhat network proxy | < 0:2.13-5.el5sat | 0:2.13-5.el5sat |
| redhat network proxy | < 0:1.4.0-5.el5sat | 0:1.4.0-5.el5sat |
| redhat network proxy | < 0:1.0-4.el5sat | 0:1.0-4.el5sat |
| redhat network proxy | < 0:3.26.9-1.el5sat | 0:3.26.9-1.el5sat |
| redhat network proxy | < 0:3.2-3.el5sat | 0:3.2-3.el5sat |
| redhat network proxy | < 0:2.2.7-1.el5sat | 0:2.2.7-1.el5sat |
| redhat network proxy | < 0:3.6.5-1.el5sat | 0:3.6.5-1.el5sat |
| redhat network proxy | < 0:2.209.6-1.el5sat | 0:2.209.6-1.el5sat |
| redhat network proxy | < 0:1.127.12-1.el5sat | 0:1.127.12-1.el5sat |
| redhat network proxy | < 0:1.1-7.el5sat | 0:1.1-7.el5sat |
| redhat network proxy | < 0:10.2.0-47.el5sat | 0:10.2.0-47.el5sat |
| redhat network proxy | < 0:10.2.0.19-5.el5sat | 0:10.2.0.19-5.el5sat |
| redhat network proxy | < 0:0.1.23.35-1.el5sat | 0:0.1.23.35-1.el5sat |
| redhat network proxy | < 0:0.38-6.el5sat | 0:0.38-6.el5sat |
| redhat network proxy | < 0:1.12-12.el5 | 0:1.12-12.el5 |
| redhat network proxy | < 0:1.4-6.el5sat | 0:1.4-6.el5sat |
| redhat network proxy | < 0:2.47-5.el5sat | 0:2.47-5.el5sat |
| redhat network proxy | < 0:1.119-10.1.el6 | 0:1.119-10.1.el6 |
| redhat network proxy | < 0:2.05-10.el5sat | 0:2.05-10.el5sat |
| redhat network proxy | < 0:0.03-15.el5sat | 0:0.03-15.el5sat |
| redhat network proxy | < 0:0.27-10.el5 | 0:0.27-10.el5 |
Show 58 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat network proxy | < 0:0.09-14.el5sat | 0:0.09-14.el5sat |
| redhat network proxy | < 0:0.59-8.el5sat | 0:0.59-8.el5sat |
| redhat network proxy | < 0:1.62-2.el5sat | 0:1.62-2.el5sat |
| redhat network proxy | < 0:1.002-5.el6 | 0:1.002-5.el6 |
| redhat network proxy | < 0:0.15-7.el5 | 0:0.15-7.el5 |
| redhat network proxy | < 0:0.43-14.el5 | 0:0.43-14.el5 |
| redhat network proxy | < 0:1.08-11.el5 | 0:1.08-11.el5 |
| redhat network proxy | < 0:2.109-11.el5 | 0:2.109-11.el5 |
| redhat network proxy | < 0:0.22-10.el6 | 0:0.22-10.el6 |
| redhat network proxy | < 0:1.66-6.el5 | 0:1.66-6.el5 |
| redhat network proxy | < 0:3.01-6.el5 | 0:3.01-6.el5 |
| redhat network proxy | < 0:5.411a-12.el5 | 0:5.411a-12.el5 |
| redhat network proxy | < 0:1.28-2.el6 | 0:1.28-2.el6 |
| redhat network proxy | < 0:0.10-7.el5sat | 0:0.10-7.el5sat |
| redhat network proxy | < 0:0.12-3.el5sat | 0:0.12-3.el5sat |
| redhat network proxy | < 0:4.0.3-10.el5 | 0:4.0.3-10.el5 |
| redhat network proxy | < 0:1.9.9-1.el5sat | 0:1.9.9-1.el5sat |
| redhat network proxy | < 0:1.23.17-1.el5sat | 0:1.23.17-1.el5sat |
| redhat network proxy | < 0:1.27.11-1.el5sat | 0:1.27.11-1.el5sat |
| redhat network proxy | < 0:1.26.12-1.el5sat | 0:1.26.12-1.el5sat |
| redhat network proxy | < 0:1.28.27-1.el5sat | 0:1.28.27-1.el5sat |
| redhat network proxy | < 0:1.10.1-1.el5sat | 0:1.10.1-1.el5sat |
| redhat network proxy | < 0:1.184.17-1.el5sat | 0:1.184.17-1.el5sat |
| redhat network proxy | < 0:1.6.1-1.el5sat | 0:1.6.1-1.el5sat |
| redhat network proxy | < 0:1.58.12-1.el5sat | 0:1.58.12-1.el5sat |
| redhat network proxy | < 0:1.7.1-3.el5sat | 0:1.7.1-3.el5sat |
| redhat network proxy | < 0:1.14.12-1.el5sat | 0:1.14.12-1.el5sat |
| redhat network proxy | < 0:0.74-10.el5 | 0:0.74-10.el5 |
| redhat network proxy | < 0:0.60a-11.el5 | 0:0.60a-11.el5 |
| redhat network proxy | < 0:1.44-1.el5 | 0:1.44-1.el5 |
| redhat network proxy | < 0:1.01-6.el5sat | 0:1.01-6.el5sat |
| redhat network proxy | < 0:0.03-2.el5 | 0:0.03-2.el5 |
| redhat network proxy | < 0:1.11.6-1.el5sat | 0:1.11.6-1.el5sat |
| redhat network proxy | < 0:0.1.16-5.el5sat | 0:0.1.16-5.el5sat |
| redhat network proxy | < 0:20081119-6.el5 | 0:20081119-6.el5 |
| redhat network proxy | < 0:2.5.22-15.el6 | 0:2.5.22-15.el6 |
| redhat network proxy | < 0:5.5.65-5.el5sat | 0:5.5.65-5.el5sat |
| redhat network proxy | < 0:1.11.5-1.el5sat | 0:1.11.5-1.el5sat |
| redhat network proxy | < 0:1.13.5-1.el5sat | 0:1.13.5-1.el5sat |
| redhat network proxy | < 0:1.54.10-1.el5sat | 0:1.54.10-1.el5sat |
| redhat network proxy | < 0:1.216.29-1.el5sat | 0:1.216.29-1.el5sat |
| redhat network proxy | < 0:2.29.14-1.el5sat | 0:2.29.14-1.el5sat |
| redhat network proxy | < 0:3.24.6-1.el5sat | 0:3.24.6-1.el5sat |
| redhat network proxy | < 0:1.1.3-1.el5sat | 0:1.1.3-1.el5sat |
| redhat network proxy | < 0:5.6.0.22-1.el5sat | 0:5.6.0.22-1.el5sat |
| redhat network proxy | < 0:1.15.8-1.el5sat | 0:1.15.8-1.el5sat |
| redhat network proxy | < 0:0.5.7-1.el5sat | 0:0.5.7-1.el5sat |
| redhat network proxy | < 0:2.0.3-18.el5sat | 0:2.0.3-18.el5sat |
| redhat network proxy | < 0:2.0.1-2.el5sat | 0:2.0.1-2.el5sat |
| redhat network proxy | < 0:2.0.1-8.el5sat | 0:2.0.1-8.el5sat |
| redhat network proxy | < 1:2.3-1.el5sat | 1:2.3-1.el5sat |
| redhat network proxy | < 0:2.0.3-17.el5sat | 0:2.0.3-17.el5sat |
| redhat network proxy | < 0:1.9.3-1.el5sat | 0:1.9.3-1.el5sat |
| redhat network proxy | < 0:0.12.11-1.el5sat | 0:0.12.11-1.el5sat |
| redhat network proxy | < 0:1.27.29-1.el5sat | 0:1.27.29-1.el5sat |
| redhat network proxy | < 0:0.1-1.el5sat | 0:0.1-1.el5sat |
| redhat satellite | = 6 | No fix listed |
| redhat satellite | < 5.6 | 5.6 |
References
- RHEA-2013:1392 vendor-advisory
- access.redhat.com third-party-advisory vdb-entry
- access.redhat.com third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- bugzilla.suse.com issue-tracking third-party-advisory